Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    62s
  • max time network
    62s
  • platform
    windows11-21h2_x64
  • resource
    win11-20240426-en
  • resource tags

    arch:x64arch:x86image:win11-20240426-enlocale:en-usos:windows11-21h2-x64system
  • submitted
    30/04/2024, 20:30

General

  • Target

    Bloxstrap-v2.5.4.exe

  • Size

    7.6MB

  • MD5

    dbb820772caf0003967ef0f269fbdeb1

  • SHA1

    31992bd4977a7dfeba67537a2da6c9ca64bc304c

  • SHA256

    b2ac1e407ed3ecd7c7faa6de929a68fb51145662cf793c40b69eb59295bba6bc

  • SHA512

    e8ac879c7198dffb78bc6ee4ad49b5de40a5a7dbbda53d427d0a034941487d13c8bb2b8d590a1fcdd81cd6abb8f21fdfcd52924eb00c45a42ee06c1e4b3d590f

  • SSDEEP

    98304:XNd5DSd5DxTsed5D2ZT00UuOYoHwfLk3vSmaR0+Mc4AN0edaAHDfysrTl1:X+sdtObAbN0u

Score
7/10

Malware Config

Signatures

  • Executes dropped EXE 3 IoCs
  • Loads dropped DLL 2 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Suspicious use of NtCreateThreadExHideFromDebugger 2 IoCs
  • Suspicious use of NtSetInformationThreadHideFromDebugger 36 IoCs
  • Modifies registry class 18 IoCs
  • Modifies system certificate store 2 TTPs 2 IoCs
  • Suspicious behavior: EnumeratesProcesses 19 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs
  • Suspicious use of FindShellTrayWindow 2 IoCs
  • Suspicious use of SendNotifyMessage 2 IoCs
  • Suspicious use of UnmapMainImage 2 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Bloxstrap-v2.5.4.exe
    "C:\Users\Admin\AppData\Local\Temp\Bloxstrap-v2.5.4.exe"
    1⤵
    • Modifies registry class
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:3412
    • C:\Users\Admin\AppData\Local\Bloxstrap\Versions\version-24872f7beace4d0a\RobloxPlayerBeta.exe
      "C:\Users\Admin\AppData\Local\Bloxstrap\Versions\version-24872f7beace4d0a\RobloxPlayerBeta.exe" --app -channel production
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      • Suspicious use of NtCreateThreadExHideFromDebugger
      • Suspicious use of NtSetInformationThreadHideFromDebugger
      • Modifies system certificate store
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of UnmapMainImage
      PID:8564
  • C:\Users\Admin\AppData\Local\Bloxstrap\Bloxstrap.exe
    "C:\Users\Admin\AppData\Local\Bloxstrap\Bloxstrap.exe"
    1⤵
    • Executes dropped EXE
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:8980
    • C:\Users\Admin\AppData\Local\Bloxstrap\Versions\version-24872f7beace4d0a\RobloxPlayerBeta.exe
      "C:\Users\Admin\AppData\Local\Bloxstrap\Versions\version-24872f7beace4d0a\RobloxPlayerBeta.exe" --app -channel production
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      • Suspicious use of NtCreateThreadExHideFromDebugger
      • Suspicious use of NtSetInformationThreadHideFromDebugger
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of UnmapMainImage
      PID:2356

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Bloxstrap\Bloxstrap.exe

    Filesize

    7.6MB

    MD5

    dbb820772caf0003967ef0f269fbdeb1

    SHA1

    31992bd4977a7dfeba67537a2da6c9ca64bc304c

    SHA256

    b2ac1e407ed3ecd7c7faa6de929a68fb51145662cf793c40b69eb59295bba6bc

    SHA512

    e8ac879c7198dffb78bc6ee4ad49b5de40a5a7dbbda53d427d0a034941487d13c8bb2b8d590a1fcdd81cd6abb8f21fdfcd52924eb00c45a42ee06c1e4b3d590f

  • C:\Users\Admin\AppData\Local\Bloxstrap\Modifications\ClientSettings\ClientAppSettings.json

    Filesize

    120B

    MD5

    636492f4af87f25c20bd34a731007d86

    SHA1

    22a5c237a739ab0df4ff87c9e3d79dbe0c89b56a

    SHA256

    22a1e85723295eeb854345be57f7d6fb56f02b232a95d69405bf9d9e67a0fa0d

    SHA512

    cd2e3a738f535eb1a119bd4c319555899bcd4ce1049d7f8591a1a68c26844f33c1bd1e171706533b5c36263ade5e275b55d40f5710e0210e010925969182cd0c

  • C:\Users\Admin\AppData\Local\Bloxstrap\Settings.json

    Filesize

    694B

    MD5

    122f81104717f419f3f9f006e9c1b70e

    SHA1

    b762977764e8c2097f2ee49ea11003f2a273ed2d

    SHA256

    cc63eab2a85081e1be6bd036867340197e00b5908cf564ed813117557888aad6

    SHA512

    004a6888562bff5061ccf2bb4bdb90b3fa42e72972859cfdba1df529275701a018f68be587fb47c02c2f93a4ef6a0846cf7c90a006e7f57495f5f4c87d90fa45

  • C:\Users\Admin\AppData\Local\Bloxstrap\State.json

    Filesize

    185B

    MD5

    ea55a0b17d85ca327af5b8ae4586b26e

    SHA1

    ee1b6b66d44bd119cd186d4a34de5ea0a8049e31

    SHA256

    c6d920885c37de7980aeba5cea378acc2f25da43c89cf3307c01b6677d57a1a4

    SHA512

    f9dc6c15c5a20ae3bf575b7258f69c6c997fea1f58993354666d4d6b1757857e0ceebcbc825d6b90f9967ad7a17333c30284575b5cb5dd68c74150499018578f

  • C:\Users\Admin\AppData\Local\Bloxstrap\Versions\version-24872f7beace4d0a\ExtraContent\textures\ui\LuaApp\graphic\shimmer_lightTheme.png

    Filesize

    20KB

    MD5

    4f8f43c5d5c2895640ed4fdca39737d5

    SHA1

    fb46095bdfcab74d61e1171632c25f783ef495fa

    SHA256

    fc57f32c26087eef61b37850d60934eda1100ca8773f08e487191a74766053d1

    SHA512

    7aebc0f79b2b23a76fb41df8bab4411813ffb1abc5e2797810679c0eaa690e7af7561b8473405694bd967470be337417fa42e30f0318acbf171d8f31620a31aa

  • C:\Users\Admin\AppData\Local\Bloxstrap\Versions\version-24872f7beace4d0a\ExtraContent\textures\ui\LuaApp\graphic\[email protected]

    Filesize

    71KB

    MD5

    3fec0191b36b9d9448a73ff1a937a1f7

    SHA1

    bee7d28204245e3088689ac08da18b43eae531ba

    SHA256

    1a03e6f6a0de045aa588544c392d671c040b82a5598b4246af04f5a74910dc89

    SHA512

    a8ab2bc2d937963af36d3255c6ea09cae6ab1599996450004bb18e8b8bdfbdde728821ac1662d8a0466680679011d8f366577b143766838fe91edf08a40353ce

  • C:\Users\Admin\AppData\Local\Bloxstrap\Versions\version-24872f7beace4d0a\ExtraContent\textures\ui\LuaDiscussions\buttonFill.png

    Filesize

    247B

    MD5

    81ce54dfd6605840a1bd2f9b0b3f807d

    SHA1

    4a3a4c05b9c14c305a8bb06c768abc4958ba2f1c

    SHA256

    0a6a5cafb4dee0d8c1d182ddec9f68ca0471d7fc820cf8dc2d68f27a35cd3386

    SHA512

    57069c8ac03dd0fdfd97e2844c19138800ff6f7d508c26e5bc400b30fe78baa0991cc39f0f86fa10cd5d12b6b11b0b09c1a770e5cb2fdca157c2c8986a09e5ff

  • C:\Users\Admin\AppData\Local\Bloxstrap\Versions\version-24872f7beace4d0a\PlatformContent\pc\textures\corrodedmetal\normaldetail.dds

    Filesize

    176B

    MD5

    f527b5859d7ca6c080ba954f3013883f

    SHA1

    3d00b598b1fb762ae0921bcc49ca189f05f417d2

    SHA256

    ff11c95774ee0405666fa313f1e53ebb46b1352bfff3456ac2b2caccdab07b4d

    SHA512

    e908a29c4316a15f5c16a005c69b402e0525b80e0c3284d6f19074ab8b05d62d079ecf43974b223a68d7c56cbf1789df69ab260553de1aab0edfbdad5e6d654d

  • C:\Users\Admin\AppData\Local\Bloxstrap\Versions\version-24872f7beace4d0a\RobloxPlayerBeta.dll

    Filesize

    17.7MB

    MD5

    869ffa62d53e303ee807db631bf688d2

    SHA1

    94ea53c881ca1ed239f5d1c9a33ccd519dcf38fb

    SHA256

    5ab31ca87ef0e7bc20c591cebe6ba3da692d63cd11a9cd4a52b15d5e3785556b

    SHA512

    802f9df7d1901c87af7a62f35ed7e87e12c3704cda006a202214ae5edb89f84b322f2aa76bb03fef02115158389677b0277afc9da0e253c81752c98b26b5b5d1

  • C:\Users\Admin\AppData\Local\Bloxstrap\Versions\version-24872f7beace4d0a\RobloxPlayerBeta.exe

    Filesize

    82.7MB

    MD5

    69a0fed5824e7b2d7a098389b40e9af2

    SHA1

    582818b5893ef58cec384bd10eac576d128ec154

    SHA256

    6fe5d2364925dbdaa379f382d3eb85b5e1a02c14f74e6f825246fdf6f74b74bd

    SHA512

    6baa030e5b46f727882ff99be19e8673b7817757bee93674af7c8200c31151aeda7a466a280fa570d123d79f68d40b0386c75520e3b3459ff8bc057a295c8b62

  • C:\Users\Admin\AppData\Local\Bloxstrap\Versions\version-24872f7beace4d0a\RobloxPlayerBeta.exe

    Filesize

    45.5MB

    MD5

    9533e8d69487e241cd2f133c1ec24483

    SHA1

    8ad365f0906789bba25be25aed69b28ac0ca1c24

    SHA256

    a54fdf37b0f2a6f9847fe767b0f669645ed67061fd49ec0e6773392d88bd14b7

    SHA512

    f78ce1112bc3f4139192043e870ada12fcf1a3e41078d5d38c0fcbbea6729fcd2f85386593856147d46fb4f9ab9c62fd1c840270ca0f437d73fc38bf050abc2f

  • C:\Users\Admin\AppData\Local\Bloxstrap\Versions\version-24872f7beace4d0a\content\configs\DateTimeLocaleConfigs\zh-cjv.json

    Filesize

    2KB

    MD5

    fb6605abd624d1923aef5f2122b5ae58

    SHA1

    6e98c0a31fa39c781df33628b55568e095be7d71

    SHA256

    7b993133d329c46c0c437d985eead54432944d7b46db6ad6ea755505b8629d00

    SHA512

    97a14eda2010033265b379aa5553359293baf4988a4cdde8a40b0315e318a7b30feee7f5e14c68131e85610c00585d0c67e636999e3af9b5b2209e1a27a82223

  • C:\Users\Admin\AppData\Local\Bloxstrap\Versions\version-24872f7beace4d0a\content\configs\DateTimeLocaleConfigs\zh-tw.json

    Filesize

    2KB

    MD5

    702c9879f2289959ceaa91d3045f28aa

    SHA1

    775072f139acc8eafb219af355f60b2f57094276

    SHA256

    a92a6988175f9c1d073e4b54bf6a31f9b5d3652eebdf6a351fb5e12bda76cbd5

    SHA512

    815a6bef134c0db7a5926f0cf4b3f7702d71b0b2f13eca9539cd2fc5a61eea81b1884e4c4bc0b3398880589bff809ac8d5df833e7e4aeda4a1244e9a875d1e97

  • C:\Users\Admin\AppData\Local\Bloxstrap\Versions\version-24872f7beace4d0a\content\sounds\ouch.ogg

    Filesize

    6KB

    MD5

    9404c52d6f311da02d65d4320bfebb59

    SHA1

    0b5b5c2e7c631894953d5828fec06bdf6adba55f

    SHA256

    c9775e361392877d1d521d0450a5368ee92d37dc542bc5e514373c9d5003f317

    SHA512

    22aa1acbcdcf56f571170d9c32fd0d025c50936387203a7827dbb925f352d2bc082a8a79db61c2d1f1795ad979e93367c80205d9141b73d806ae08fa089837c4

  • C:\Users\Admin\AppData\Local\Bloxstrap\Versions\version-24872f7beace4d0a\content\textures\Cursors\KeyboardMouse\IBeamCursor.png

    Filesize

    292B

    MD5

    464c4983fa06ad6cf235ec6793de5f83

    SHA1

    8afeb666c8aee7290ab587a2bfb29fc3551669e8

    SHA256

    99fd7f104948c6ab002d1ec69ffd6c896c91f9accc499588df0980b4346ecbed

    SHA512

    f805f5f38535fe487b899486c8de6cf630114964e2c3ebc2af7152a82c6f6faef681b4d936a1867b5dff6566b688b5c01105074443cc2086b3fe71f7e6e404b1

  • C:\Users\Admin\AppData\Local\Bloxstrap\Versions\version-24872f7beace4d0a\content\textures\StudioToolbox\Clear.png

    Filesize

    538B

    MD5

    fa8eaf9266c707e151bb20281b3c0988

    SHA1

    3ca097ad4cd097745d33d386cc2d626ece8cb969

    SHA256

    8cf08bf7e50fea7b38f59f162ed956346c55a714ed8a9a8b0a1ada7e18480bc2

    SHA512

    e29274300eab297c6de895bb39170f73f0a4ffa2a8c3732caeeeac16e2c25fb58bb401fdd5823cc62d9c413ec6c43d7c46861d7e14d52f8d9d8ff632e29f167c

  • C:\Users\Admin\AppData\Local\Bloxstrap\Versions\version-24872f7beace4d0a\content\textures\StudioUIEditor\valueBoxRoundedRectangle.png

    Filesize

    130B

    MD5

    521fb651c83453bf42d7432896040e5e

    SHA1

    8fdbf2cc2617b5b58aaa91b94b0bf755d951cad9

    SHA256

    630303ec4701779eaf86cc9fbf744b625becda53badc7271cbb6ddc56e638d70

    SHA512

    8fa0a50e52a3c7c53735c7dd7af275ebc9c1843f55bb30ebe0587a85955a8da94ff993822d233f7ed118b1070a7d67718b55ba4a597dc49ed2bf2a3836c696f6

  • C:\Users\Admin\AppData\Local\Bloxstrap\Versions\version-24872f7beace4d0a\content\textures\TerrainTools\checkbox_square.png

    Filesize

    985B

    MD5

    2cb16991a26dc803f43963bdc7571e3f

    SHA1

    12ad66a51b60eeaed199bc521800f7c763a3bc7b

    SHA256

    c7bae6d856f3bd9f00c122522eb3534d0d198a9473b6a379a5c3458181870646

    SHA512

    4c9467e5e2d83b778d0fb8b6fd97964f8d8126f07bfd50c5d68c256703f291ceaed56be057e8e2c591b2d2c49f6b7e099a2b7088d0bf5bdd901433459663b1f8

  • C:\Users\Admin\AppData\Local\Bloxstrap\Versions\version-24872f7beace4d0a\content\textures\ui\Controls\XboxController\Thumbstick1.png

    Filesize

    641B

    MD5

    2cbe38df9a03133ddf11a940c09b49cd

    SHA1

    6fb5c191ed8ce9495c66b90aaf53662bfe199846

    SHA256

    0835a661199a7d8df7249e8ae925987184efcc4fb85d9efac3cc2c1495020517

    SHA512

    dcef5baccef9fff632456fe7bc3c4f4a403363d9103a8047a55f4bd4c413d0c5f751a2e37385fe9eba7a420dbdb77ca2ff883d47fcdd35af222191cc5bd5c7a9

  • C:\Users\Admin\AppData\Local\Bloxstrap\Versions\version-24872f7beace4d0a\content\textures\ui\Controls\XboxController\[email protected]

    Filesize

    1KB

    MD5

    e8c88cf5c5ef7ae5ddee2d0e8376b32f

    SHA1

    77f2a5b11436d247d1acc3bac8edffc99c496839

    SHA256

    9607af14604a8e8eb1dec45d3eeca01fed33140c0ccc3e6ef8ca4a1f6219b5dd

    SHA512

    32f5a1e907705346a56fbddfe0d8841d05415ff7abe28ae9281ba46fedf8270b982be0090b72e2e32de0ce36e21934f80eaf508fd010f7ab132d39f5305fb68f

  • C:\Users\Admin\AppData\Local\Bloxstrap\Versions\version-24872f7beace4d0a\content\textures\ui\Controls\XboxController\[email protected]

    Filesize

    1KB

    MD5

    499333dae156bb4c9e9309a4842be4c8

    SHA1

    d18c4c36bdb297208589dc93715560acaf761c3a

    SHA256

    d35a74469f1436f114c27c730a5ec0793073bcf098db37f10158d562a3174591

    SHA512

    91c64173d2cdabc045c70e0538d45e1022cc74ec04989565b85f0f26fe3e788b700a0956a07a8c91d34c06fc1b7fad43bbdbb41b0c6f15b9881c3e46def8103e

  • C:\Users\Admin\AppData\Local\Bloxstrap\Versions\version-24872f7beace4d0a\content\textures\ui\Controls\XboxController\Thumbstick2.png

    Filesize

    738B

    MD5

    a402aacac8be906bcc07d50669d32061

    SHA1

    9d75c1afbe9fc482983978cae4c553aa32625640

    SHA256

    62a313b6cc9ffe7dd86bc9c4fcd7b8e8d1f14a15cdf41a53fb69af4ae3416102

    SHA512

    d11567bcaad8bbd9e2b9f497c3215102c7e7546caf425e93791502d3d2b3f78dec13609796fcd6e1e7f5c7d794bac074d00a74001e7fe943d63463b483877546

  • C:\Users\Admin\AppData\Local\Bloxstrap\Versions\version-24872f7beace4d0a\content\textures\ui\Controls\XboxController\[email protected]

    Filesize

    1KB

    MD5

    83e9b7823c0a5c4c67a603a734233dec

    SHA1

    2eaf04ad636bf71afdf73b004d17d366ac6d333e

    SHA256

    3b5e06eb1a89975def847101f700f0caa60fe0198f53e51974ef1608c6e1e067

    SHA512

    e8abb39a1ec340ac5c7d63137f607cd09eae0e885e4f73b84d8adad1b8f574155b92fbf2c9d3013f64ebbb6d55ead5419e7546b0f70dcde976d49e7440743b0f

  • C:\Users\Admin\AppData\Local\Bloxstrap\Versions\version-24872f7beace4d0a\content\textures\ui\Controls\XboxController\[email protected]

    Filesize

    1KB

    MD5

    55b64987636b9740ab1de7debd1f0b2f

    SHA1

    96f67222ce7d7748ec968e95a2f6495860f9d9c9

    SHA256

    f4a6bb3347ee3e603ea0b2f009bfa802103bc434ae3ff1db1f2043fa8cace8fc

    SHA512

    73a88a278747de3fefbaabb3ff90c1c0750c8d6c17746787f17061f4eff933620407336bf9b755f4222b0943b07d8c4d01de1815d42ea65e78e0daa7072591e9

  • memory/3412-3-0x00007FFE5C060000-0x00007FFE5C55E000-memory.dmp

    Filesize

    5.0MB

  • memory/3412-0-0x00007FFE5C060000-0x00007FFE5C55E000-memory.dmp

    Filesize

    5.0MB

  • memory/8564-7124-0x00007FFE79F90000-0x00007FFE79FA0000-memory.dmp

    Filesize

    64KB

  • memory/8564-7110-0x00007FFE7B080000-0x00007FFE7B090000-memory.dmp

    Filesize

    64KB

  • memory/8564-7138-0x00007FFE7C8D0000-0x00007FFE7C8D1000-memory.dmp

    Filesize

    4KB

  • memory/8564-7137-0x00007FFE79EF0000-0x00007FFE79F16000-memory.dmp

    Filesize

    152KB

  • memory/8564-7136-0x00007FFE79EF0000-0x00007FFE79F16000-memory.dmp

    Filesize

    152KB

  • memory/8564-7140-0x00007FFE7CA50000-0x00007FFE7CA80000-memory.dmp

    Filesize

    192KB

  • memory/8564-7139-0x00007FFE7CA50000-0x00007FFE7CA80000-memory.dmp

    Filesize

    192KB

  • memory/8564-7135-0x00007FFE79EF0000-0x00007FFE79F16000-memory.dmp

    Filesize

    152KB

  • memory/8564-7134-0x00007FFE79EF0000-0x00007FFE79F16000-memory.dmp

    Filesize

    152KB

  • memory/8564-7133-0x00007FFE79EF0000-0x00007FFE79F16000-memory.dmp

    Filesize

    152KB

  • memory/8564-7132-0x00007FFE7A0D0000-0x00007FFE7A0F0000-memory.dmp

    Filesize

    128KB

  • memory/8564-7131-0x00007FFE7A0D0000-0x00007FFE7A0F0000-memory.dmp

    Filesize

    128KB

  • memory/8564-7130-0x00007FFE7A0D0000-0x00007FFE7A0F0000-memory.dmp

    Filesize

    128KB

  • memory/8564-7129-0x00007FFE7A0D0000-0x00007FFE7A0F0000-memory.dmp

    Filesize

    128KB

  • memory/8564-7128-0x00007FFE7A0D0000-0x00007FFE7A0F0000-memory.dmp

    Filesize

    128KB

  • memory/8564-7127-0x00007FFE7A0A0000-0x00007FFE7A0B0000-memory.dmp

    Filesize

    64KB

  • memory/8564-7126-0x00007FFE7A0A0000-0x00007FFE7A0B0000-memory.dmp

    Filesize

    64KB

  • memory/8564-7125-0x00007FFE79F90000-0x00007FFE79FA0000-memory.dmp

    Filesize

    64KB

  • memory/8564-7094-0x00007FFE7B4D0000-0x00007FFE7B4F0000-memory.dmp

    Filesize

    128KB

  • memory/8564-7122-0x00007FFE7B310000-0x00007FFE7B319000-memory.dmp

    Filesize

    36KB

  • memory/8564-7121-0x00007FFE7B310000-0x00007FFE7B319000-memory.dmp

    Filesize

    36KB

  • memory/8564-7120-0x00007FFE7B310000-0x00007FFE7B319000-memory.dmp

    Filesize

    36KB

  • memory/8564-7119-0x00007FFE7B310000-0x00007FFE7B319000-memory.dmp

    Filesize

    36KB

  • memory/8564-7118-0x00007FFE7B2F0000-0x00007FFE7B300000-memory.dmp

    Filesize

    64KB

  • memory/8564-7117-0x00007FFE7B2F0000-0x00007FFE7B300000-memory.dmp

    Filesize

    64KB

  • memory/8564-7116-0x00007FFE7B2F0000-0x00007FFE7B300000-memory.dmp

    Filesize

    64KB

  • memory/8564-7115-0x00007FFE7B0C0000-0x00007FFE7B0CD000-memory.dmp

    Filesize

    52KB

  • memory/8564-7114-0x00007FFE7B0C0000-0x00007FFE7B0CD000-memory.dmp

    Filesize

    52KB

  • memory/8564-7113-0x00007FFE7B0C0000-0x00007FFE7B0CD000-memory.dmp

    Filesize

    52KB

  • memory/8564-7112-0x00007FFE7B0C0000-0x00007FFE7B0CD000-memory.dmp

    Filesize

    52KB

  • memory/8564-7111-0x00007FFE7B0C0000-0x00007FFE7B0CD000-memory.dmp

    Filesize

    52KB

  • memory/8564-7123-0x00007FFE7B310000-0x00007FFE7B319000-memory.dmp

    Filesize

    36KB

  • memory/8564-7109-0x00007FFE7B080000-0x00007FFE7B090000-memory.dmp

    Filesize

    64KB

  • memory/8564-7108-0x00007FFE7B010000-0x00007FFE7B020000-memory.dmp

    Filesize

    64KB

  • memory/8564-7107-0x00007FFE7B010000-0x00007FFE7B020000-memory.dmp

    Filesize

    64KB

  • memory/8564-7106-0x00007FFE7A620000-0x00007FFE7A630000-memory.dmp

    Filesize

    64KB

  • memory/8564-7105-0x00007FFE7A620000-0x00007FFE7A630000-memory.dmp

    Filesize

    64KB

  • memory/8564-7104-0x00007FFE7A620000-0x00007FFE7A630000-memory.dmp

    Filesize

    64KB

  • memory/8564-7103-0x00007FFE7A600000-0x00007FFE7A610000-memory.dmp

    Filesize

    64KB

  • memory/8564-7102-0x00007FFE7A600000-0x00007FFE7A610000-memory.dmp

    Filesize

    64KB

  • memory/8564-7101-0x00007FFE7A600000-0x00007FFE7A610000-memory.dmp

    Filesize

    64KB

  • memory/8564-7100-0x00007FFE7A450000-0x00007FFE7A460000-memory.dmp

    Filesize

    64KB

  • memory/8564-7099-0x00007FFE7A450000-0x00007FFE7A460000-memory.dmp

    Filesize

    64KB

  • memory/8564-7098-0x00007FFE7A2E0000-0x00007FFE7A2F0000-memory.dmp

    Filesize

    64KB

  • memory/8564-7097-0x00007FFE7A2E0000-0x00007FFE7A2F0000-memory.dmp

    Filesize

    64KB

  • memory/8564-7093-0x00007FFE7B4D0000-0x00007FFE7B4F0000-memory.dmp

    Filesize

    128KB

  • memory/8564-7092-0x00007FFE7B4D0000-0x00007FFE7B4F0000-memory.dmp

    Filesize

    128KB

  • memory/8564-7091-0x00007FFE7B4D0000-0x00007FFE7B4F0000-memory.dmp

    Filesize

    128KB

  • memory/8564-7090-0x00007FFE7B4B0000-0x00007FFE7B4C0000-memory.dmp

    Filesize

    64KB

  • memory/8564-7089-0x00007FFE7B4B0000-0x00007FFE7B4C0000-memory.dmp

    Filesize

    64KB

  • memory/8564-7088-0x00007FFE7B420000-0x00007FFE7B430000-memory.dmp

    Filesize

    64KB

  • memory/8564-7087-0x00007FFE7B420000-0x00007FFE7B430000-memory.dmp

    Filesize

    64KB

  • memory/8564-7084-0x00007FFE7CA50000-0x00007FFE7CA80000-memory.dmp

    Filesize

    192KB

  • memory/8564-7083-0x00007FFE7CA50000-0x00007FFE7CA80000-memory.dmp

    Filesize

    192KB

  • memory/8564-7082-0x00007FFE7CA50000-0x00007FFE7CA80000-memory.dmp

    Filesize

    192KB

  • memory/8564-7081-0x00007FFE7CA50000-0x00007FFE7CA80000-memory.dmp

    Filesize

    192KB

  • memory/8564-7080-0x00007FFE7CA00000-0x00007FFE7CA10000-memory.dmp

    Filesize

    64KB

  • memory/8564-7079-0x00007FFE7CA00000-0x00007FFE7CA10000-memory.dmp

    Filesize

    64KB

  • memory/8564-7078-0x00007FFE7C8E0000-0x00007FFE7C8F0000-memory.dmp

    Filesize

    64KB

  • memory/8564-7077-0x00007FFE7C8E0000-0x00007FFE7C8F0000-memory.dmp

    Filesize

    64KB

  • memory/8564-7095-0x00007FFE7B4D0000-0x00007FFE7B4F0000-memory.dmp

    Filesize

    128KB

  • memory/8564-7096-0x00007FFE7B5C0000-0x00007FFE7B5CC000-memory.dmp

    Filesize

    48KB

  • memory/8564-7086-0x00007FFE7CAE0000-0x00007FFE7CAE9000-memory.dmp

    Filesize

    36KB

  • memory/8564-7085-0x00007FFE7CA50000-0x00007FFE7CA80000-memory.dmp

    Filesize

    192KB